HOWTO : Commix on Ubuntu 14.04 LTS

Commix (short for [comm]and [i]njection e[x]ploiter) has a simple environment and it can be used, from web developers, penetration testers or even security researchers to test web applications with the view to find bugs, errors or vulnerabilities related to command injection attacks. By using this tool, it is very easy to find and exploit a command injection vulnerability in a certain vulnerable parameter or string. Commix is written in Python programming language.





Install



sudo apt-get install git



cd ~

mkdir arsenal

cd arsenal

git clone https://github.com/stasinopoulos/commix.git

cd commix

python commix.py -h





Update/Upgrade



sudo apt-get update

sudo apt-get dist-upgrade



cd ~/arsenal/commix

python commix.py --update





Reference



Wiki





That's all! See you.